How to disable user synced with Active Directory

We are using 4.2.f and I'm needing to disable a user account within alfresco without disabling this person's AD account. Is there a way to do that? Or atleast make it where nothing can be done in Alfresco for the user?